A crypto wallet lets you inspect blockchain balances and authorize transactions. Your coins are recorded on the network; the wallet manages access to them. The most useful starting question is who controls the keys, followed by how those keys are protected.
Wallet labels describe different things. Self-custody concerns control. Hot or cold storage concerns exposure of the signing keys. A self-custody phone wallet can be hot, while a custodian may store some of its keys offline.
A custodial service operates the keys and manages access through your account. You depend on its security, solvency and withdrawal process. Self-custody removes that particular dependency but makes your recovery arrangements critical. A forgotten app password and a lost recovery secret are not necessarily the same problem.
Ethereum's wallet documentation distinguishes the wallet application from the account it accesses. Reinstalling an application alone does not recreate missing keys.
Check support for the exact networks and assets you use. Also check how the wallet displays transaction details, whether it supports hardware signing and how recovery works. Download from a verified official source and examine the developer identity.
A hot wallet is convenient for frequent use but shares the risks of its connected device. A hardware device can keep keys isolated while signing. It cannot make a malicious transaction harmless if you approve it.
Separating a small spending balance from longer-term holdings can limit exposure. Separate accounts derived from one compromised recovery phrase do not provide independent protection against that compromise.
Protect physical backups against theft and accidental destruction. Extra copies improve resilience but create extra exposure. Do not improvise by splitting words between locations unless you fully understand the recovery design.
Use the maker's documented backup-check procedure. Do not type a hardware wallet's recovery phrase into an ordinary website to “verify” it. Avoid wiping a funded wallet just to experiment.
Some wallets use recovery shares, guardians or other methods instead of a conventional phrase. An optional passphrase can create a different wallet and may be unrecoverable if forgotten. Follow your selected system rather than instructions meant for another product.
A backup helps recover access after device loss. It does not reverse a transfer or remove permissions you already granted to a malicious contract.
If a recovery secret is exposed, changing the app password does not change the compromised keys. A replacement wallet must use a newly generated secret on a trusted device. Before moving funds, assess whether the attacker can automatically remove anything sent to the old address, including fee money.
